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TITLE OF THE INVENTION 

ADDRESS TRANSLATOR AND METHOD FOR MANAGEMENT OF 
ADDRESS TRANSLATION RULES 



5 BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to an address 
translator for mutual connection among a plurality 
of communication networks in which address 
10 translation is required for discrimination of hosts 
for mutual communication. 

Description of Related Art 

A protocol translation is known as a technology to 
realize communication between a network to which a certain 

15 host belongs and a network to which a communication partner 
belongs under the condition that different communication 
protocols are used in these networks. For example, as the 
Internet Protocol (hereinafter, referred to as "IP") , the 
Internet Protocol version 4 (hereinafter, referred to as 

20 "IPv4") is used at present at the every corner in the world. 
However, it is now in the fear for shortage of available 
addresses and therefore the Internet Protocol version 6 
(hereinafter, referred to as "IPv6") has been proposed in 
order to solve this problem. 
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Since it is substantially impossible, however, to 
shift the Internet Protocol to IPv6 from IPv4 in direct, 
introduction of the system to connect through the protocol 
translation the network using IPv4 and the network using 

5 IPv6 has also been proposed. As the practical translation 
systems, the NAT-PT described in the RFCs (Request For 
Comments) 2765 and 2766 published from the IETF (Internet 
Engineering Task Force) and the SOCKS64 described in the 
RFC3089 and the transport relay described in the RFC3142 or 

10 the like are known. 

These translation systems are basically intended to 
translate the formats of IP packet between the IPv4 and IPv6 . 
In this case, since the address translation is also 
performed between the IPv4 and IPv6, it is required to 

15 generate the translation rule for the IPv4 address and IPv6 
address before the translation and then maintain these 
address translation rule. This translation rule is 
previously set statically in some cases or created 
dynamically for each generation of communication. In the 

20 latter case, name resolution of DNS (Domain Name System) is 
utilized to start generation of the translation rule. 

The DNS is the system to translate the names which are 
written by a string of characters for easier understanding 
by peoples into the IP addresses. The operation to translate 

25 the names into the IP addresses is called the name 
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resolution. At present, almost all applications on the 
Internet obtain the IP addresses of the communication 
partner by utilizing this DNS. 

The IPv4 -IPv6 translator always monitors the messages 
5 of DNS exchanged to start the communication by utilizing 
this fact and generates the IP address translation rule when 
the name resolution request message is issued. The 
practical operations will be described below considering 
the example of communication originated toward an IPv4 host 

10 from an IPv6 host. 

First, an IPv6 host inquires an IPv6 address of the 
receiving side host to a DNS proxy server. Next, the DNS 
proxy server also inquires to the other DNS servers and 
receives, as the response to this request, the address of 

15 the receiving side host. The DNS proxy server updates, when 
the received address is the IPv4 address, the IPv4 address 
in the response message to a temporary IPv6 address and then 
returns this temporary IPv6 address to the IPv6 host. In 
this case, the IPv4-IPv6 translator generates, in 

20 cooperation with the DNS proxy server, the address 

translation rule under the correspondence between the IPv4 
address before updating and the updated temporary IPv6 
address and thereafter stores this rule within the server. 
The transmitting side IPv6 host transmits IPv6 

25 packets to the temporary IPv6 address of the receiving side 




ho st notified by the name solution of PKS as described above . 
In this timing the sou.ce address of pacKets is the IPv6 
add ress of the transmits side host itseif. These IPv6 
packets are once received by the IPv4 - Ipv6 transistor. 

„ nf th e IPv6 packet, the IPv4 -IPv6 
Upon reception of tne irvo y 

translator searches first the IPv4 address corresponds to 
the destination IPv6 address of the IPv6 pacHets fro. a table 
etorins the address transiation ruie (hereinafter, referred 
to as the "address transiation table-, . In this timin,, 
„ si nce the destination address transiation ruie is already 
ge nerated by the name resoiution of OHS. the o M ect XPv4 
address can be obtained. 

»ext. the IPv4 - IPv6 translator searches the IPv4 

,- n tll e IPv6 address of the 
address corresponding to tne 

15 transmission source of the IPv6 pacKets fro, the address 
translation table. However, since the translation rule of 
the transmission source address is not yet generated in this 
timing, the o bj ect IPv4 address cannot be obtained. 
Therefore, the address translator newly assi g ns the 
„ temporary IPv4 address for the IPv6 address of the 

transmits side host and then senerates the address 
trsnslation rule throu.h correspondence between these two 
cresses and also renters it to the address translation 



table. 
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When the translation rule of the transmission source 
address is generated and the IPv4 address corresponding 
respectively to the transmission source and destination can 
be obtained, the IPv6 packets are translated to the IPv4 
5 packets where the transmission source and destination 
addresses are updated respectively to the corresponding 
IPv4 address and are then transmitted toward the 
destination. Thereafter, since the translation rule of the 
transmission source address and destination address is 

10 already generated for the packets transmitted between both 
hosts, the packet translation is performed with reference 
to the translation rule. 

Here, the address translation rule generated 
dynamically is only temporary rule and therefore this rule 

15 is discarded when communication is terminated. 

In above example, the communication toward the IPv4 
host from the IPv6 host is discussed, but the communication 
toward the IPv6 host from the IPv4 host and the communication 
which requires address translation between the IPv4 hosts 

20 (for example, communication between two IPv4 private 

networks in which addresses may be overlapped) also generate 
the address translation rule in the sequence described above 
to realize the communication through the address 
translation. 
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in addition, even when the communication protocols 
other than IP are used, it is also possible to generate the 
rule for mutual translation of discriminator of hosts 
depending on the protocol can be generated in the same manner 
as that described above by providing a means to establish 
correspondence between the information to discriminate the 
host in each protocol such as the IPv4 address and IPv6 
address and the information to uniquely discriminate the 
host not depending on the protocol. 
, as is obvious from above description, in the 

communication through address translation, the destination 
address after update by the address translation process has 
to be the address given actually to the host (hereinafter, 
referred to as "native address"). Moreover, the 
.5 transmission source address before update by the address 
translation process also has to be the native address. 

If the destination address after update by the address 
translation process is a temporary address, following two 
kinds of failures may be thought. 
20 First, when a host having an address matched with the 

destination address after update process does not exist, the 
packets transmitted from the address translator through 
address translation do not have any destination. 

Second, when an address preset as the temporary 
25 address is overlapped with the address of host which 
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actually exists, the packets transmitted from the address 
translator through address translation reach unexpected 
destination. 

When the address solution by DNS is utilized to start 
5 generation of the address translation rule, the second 
failure may be estimated to occur. 

Moreover, if the transmission source address before 
update through address translation process is a temporary 
address, another host which is given the address same as the 

10 transmission source address after update process can be 
estimated to exist and therefore the hosts in the receiving 
side estimate the packets as that transmitted from another 
host. Accordingly, it becomes possible for malicious hosts 
to make a false access to a certain host or server by 

15 pretending to be the other actual hosts. 

As described above, when the transmission source 
address before address translation is a temporary address 
or when the destination address after address translation 
is a temporary address in the communication which requires 

20 address translation, there is considered a fear for 

occurrence of failure in the network which is accommodating 
the transmission destination host because the packets given 
such destination address exist. 
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SUMMARY OF THE INVENTION 

An object of the present invention is to provide 
an address translator having, in order to prevent 
a network failure in the communication which 
5 requires address translation, a function to inspect 
whether the transmission source address before 
address translation is not a temporary address or 
a function to inspect whether the destination 
address after address translation is not a temporary 

10 address . 

The address translator of the present 
invention comprises an area to store the information 
to discriminate native addresses and temporary 
addresses among a plurality of corresponding 

15 addresses in association with the address 

translation rule in an address translation table. 
Therefore, this address translator creates a 
translation rule by assigning temporary addresses 
to native addresses to simultaneously store the 

20 identification information at the time of 

registering the translation rule to the address 
translation table. 

Moreover, the address translator of the 
present invention searches the address translation 

25 table when it is requested to assign a temporary 
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Fig. 4 is a flowchart illustrating the sequence 
of the IP header translation process; 

Fig. 5 is a schematic diagram of a communication 
network connecting the IPv4 network and the IPv6 
5 network via the IPv4-IPv6 translator; 

Fig. 6 is a sequence diagram for name solution 
of an IPv6 host by an IPv4 host; 

Fig. 7 is a sequence diagram when an IPv4 host 
transmits the first packet to an IPv6 host after the 
10 name solution of the IPv6 host by the IPv4 host; 

Fig. 8 is a sequence diagram when an IPv4 host 
transmits the second and successive packets to an IPv6 host 
after the name resolution of the IPv6 host by the IPv4 host; 

Fig. 9 is a sequence diagram when an IPv6 host 
15 transmits packets to an IPv4 host after the name resolution 
of the IPv6 host by the IPv4 host; 

Fig. 10 is a sequence diagram when a source address 
is overlapped with a temporary address at the time of 
assigning a temporary address of an IPv4 host when an IPv6 
20 host issues a query of the DNS; 

Fig. 11 is a sequence diagram when an IPv4 host makes 
access to an IPv6 host using a false temporary address as 
the transmission source address; 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Embodiment 1 

A first embodiment of the present invention will be 
described with reference to the accompanying drawings. 
5 Fig. 1 is a structural diagram of an IPv4 -IPv6 

translator as the first embodiment of the present invention. 

This IPv4-IPv6 translator is located between the IPv4 
network and the IPv6 network to realize communication 
between an IPv4 host and an IPv6 host through IP header 
10 translation of the IPv4 packets and IPv6 packets and 
comprises an IP packet I/O interface 12, an IP header 
translation module 13, a temporary IP address assignment 
module 14 , an IP address translation information manager 15 , 
a controller 16, and a console interface 17. Moreover, this 
15 IPv4 -IPv6 translator is connected with a console unit 11 via 
a communication line 18. 

The console unit 11 establishes operations of the 
IPv4 -IPv6 translator and displays operating condition 
thereof and is comprised, for example, of a display unit such 
20 as CRT or the like, an input unit such as a keyboard and an 
electronic device such as CPU and RAM. 

The IP packet I/O interface 12 has a function to 
transmit and receive the IPv4 packets and IPv6 packets 
between the IPv4 network and the IPv6 network and is 



-13- 



configured, for example, with an electronic device such as 
CPU and RAM. 

The IP header translation module 13 has a function to 
translate IP headers of the IPv4 packets and the IPv6 packets 
5 and is comprised, for example, of an electronic device such 
as CPU and RAM . 

The temporary IP address assignment module 14 has a 
function to assign a temporary IPv4 address or a temporary 
IPv6 address as required and is comprised, for example, of 
10 an electronic device such as CPU and RAM. 

The temporary IP address assignment module 14 pools 
one or more IPv4 addresses, selects only one address not used 
from the IPv4 addresses pooled for the hosts connected to 
the IPv6 network and then assigns this selected address as 
15 a temporary IPv4 address. 

Moreover, the temporary IP address assignment module 
14 pools a prefix expressed with a numerical value of 96 bits 
generates a numerical value of 128 bits for the hosts 
connected to the IPv4 network by putting the prefix of 96 
20 bits before the IPv4 address expressed with a numerical 
value of 32 bits and assigns this numerical value of 128 bits 
as a temporary IPv6 address. 

The IP address translation information manager 15 has 
functions for management, reading, adding and deletion of 
25 the information for translation of the IPv4 address and IPv6 
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address and is comprised, for example, of an electronic 
device such as CPU and RAM . The interior of this IP address 
translation information manager 15 is further divided into 
an IP address translation table 150, an IP address checking 

5 module 153 and a table searching module 154. 

Figs. 2A and 2B are structural diagrams of the IP 
address translation table 150. Fig. 2A is the IP address 
translation table of the prior art, while Fig. 2B is the IP 
address translation table of the present invention. In the 

10 prior art, only entry of the IP address translation table 
150 is provided with only an area 151 to store the IP address 
translation rule. Meanwhile, the structure of the present 
invention is characterized in comprising an area 152 to 
store discriminator of temporary addresses in addition to 

15 the area 151 to store the IP address translation rule. 

The IPv4 address is recorded with a numerical value 
of 32 bits to the area to store the IPv4 address in the area 
151, while the IPv6 address, with a numerical value of 128 
bits to the area to store the IPv6 address in the same area. 

20 To the area 152 to store the discriminator of 

temporary address, 0 is stored when the IPv4 address is a 
temporary address and the IPv6 address is a native address, 
while 1 is stored when the IPv6 address is a temporary 
address and the IPv4 address is a native address. 
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The controller 16 has a function to control each 
structural element of the IPv4-IPv6 translator and is 
comprised, for example, of an electronic device such as CPU 
and RAM. 

5 The console interface 17 has a function to transfer 

instructions inputted through the console unit 11 and 
transfer messages outputted from the controller 16 to the 
console unit 11 and is comprised, for example, of an 
electronic device such as CPU and RAM. 

10 The IP address translation information manager 15 

transmits, upon reception of an instruction displaying 
contents of a part or the entire part of the entry of the 
IP address translation table 150 from the console unit 11, 
a message describing the IPv4 address, IPv6 address, native 

15 address and temporary address of the relevant entry to the 
console unit 11 through the console interface 17. 

Next, operation of each module of the IPv4 -IPv6 
translator in the temporary address assignment process and 
IP header translation process to be started when the query 

20 to the domain information of DNS is issued will be described 
below sequentially. 

Fig. 3 is a flowchart showing the procedures of the 
temporary address assignment process when a query of DNS is 
issued. 
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The IPv4 -IPv6 translator 1 is connected with a DNS 
proxy server via a communication line. 

The DNS proxy server receives a query of domain 
information from hosts within the IPv4 network and IPv6 
5 network in accordance with the DNS technology described in 
the RFC104 and RFC1886 or the like, transfers the query to 
the DNS server within the IPv4 network or IPv6 network and 
then returns the domain information obtained to the query 
source hosts. 

10 The DNS proxy server obtains, when kinds of addresses 

are different in the query received from the host and in the 
answer received from the DNS server, a temporary address, 
from the IPv4 -IPv6 translator, belonging to the kind same 
as the query from the host and then returns an address answer 

15 of the DNS response from the DNS server to the query source 
host by generating the DNS response updated to the temporary 
address obtained. However, if acquisition of temporary 
address fails, an erroneous DNS response is returned to the 
query source host. 

20 The IPv4 -IPv6 translator 1 receives a message with the 

IP packet I/O interface 12 when the message to request a 
temporary address arrives from the DNS proxy server and then 
transfers this message to the temporary IP assignment module 
14. 
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In order to check whether a temporary address is 
already assigned for a source address notified from the DNS 
server by the DNS proxy server (hereinafter, referred to as 
"original address"), the temporary IP address assignment 

5 module 14 issues a query for temporary address corresponding 
to the original address to the IP address translation 
information manager 15. The original address is described 
in the message for requesting the temporary address. 

In the IP address translation information manager 15, 

10 the IP address checking module 153 searches the IP address 
translation table 150 to find out the original address. As 
a result, if the target entry cannot be found, a message 
suggesting no existence of entry is notified to the 
temporary IP address assignment module 14. 

15 The temporary IP address assignment module 14 judges, 

upon reception of the message suggesting no-existence of 
entry, the temporary address is not yet assigned, newly 
assigns a temporary address and registers it to the IP 
address translation table 150. In this case, the 

20 discriminator of temporary address is also registered to the 
table. Thereafter, the temporary IP address assignment 
module 14 generates a response message including the newly 
assigned temporary address and then returns this message to 
the DNS proxy server through the IP packet I/O interface 12. 
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Meanwhile, when the entry including the original 
address is found as a result of table search, the IP address 
searching module 154 transfers contents of the relevant 
entry to the IP address checking module 153. 
5 This IP address checking module 153 checks whether 

attribute of the original address is native address or 
temporary address by referring to the discriminator of 
temporary address in the entry received. When the original 
address is verified that it is registered as the native 

10 address as a result of address check, the IP address checking 
module 153 judges the normal condition where the temporary 
address is already assigned and transfers the temporary 
address described in the relevant entry to the temporary IP 
address assignment module 14. 

15 The temporary IP address assignment module 14 

transfers, upon reception of the temporary address from the 
IP address checking module 153, a response message including 
the notified temporary address and returns this message to 
the DNS proxy server through the IP packet I/O interface 12. 

20 When it is proved as a result of address check that 

the original address has been registered as the temporary 
address, the IP address checking module 153 notifies, to the 
temporary IP address assignment module 14, that a failure 
occurs in the original address. 



-19- 



When the temporary IP address assignment module 14 
transfers, upon reception of a failure in the original 
address from the IP address checking module 153, a response 
message indicating that assignment of temporary address has 

5 failed and returns this response message to the DNS proxy 
server through the IP packet I/O interface 12. Moreover, 
the temporary IP address assignment module 14 transmits the 
message notifying that assignment of temporary address has 
been requested to the temporary address to the console unit 

10 11 through the console interface 17. 

The present invention described in this specification 
also has a function to prevent that the packet which is given 
the transmission source address or destination address is 
transmitted to the network accommodating the destination 

15 host when the transmission source address before address 
translation is a temporary address or when the destination 
address after address translation is a temporary address. 
Moreover, the present invention further has a function to 
notify occurrence of this situation, if it has occurred, to 

20 an administrator in order to urge him to take a proper 
measure. 

In other words, the address translator described in 
this embodiment searches the address translation table at 
the time of executing the address translation process in 
25 order to find out the translation rule of the destination 
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address recorded in the packets received and the translation 
rule of the transmission source address of the same packets. 
When the target translation rule is found, the address 
translator judges which address among two addresses in the 
5 corresponding condition in the translation rule is a 

temporary address from the aforementioned discriminator. 
In the case where the transmission source address described 
in the received packets before the translation process is 
registered as the temporary address or when the address to 

10 update the destination address described in the packets 
received is registered as the temporary address, the address 
translator discards the packets received. 

Moreover, the address translator described in this 
embodiment notifies a message indicating occurrence of a 

15 failure to the administrator with the notifying means 

described above in the cases where the means for notifying 
occurrence of a failure to the administrator is provided and 
the address notified from the DNS server is registered to 
the address translation table as the temporary address and 

20 where the transmission source address of the received 
packets before the address translation process or the 
address to update the destination of the received packets 
when the address translation process is executed is 
registered as the temporary address to the address 

25 translation table. 
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the table searching module 154 transfers contents of the 
relevant entry to the IP address checking module 153. 

The IP address checking module 153 checks whether 
attribute of the address to replace the destination address 

5 is a native address or a temporary address by referring to 
the discriminator of the temporary address in the entry 
received. When it is proved as a result of checking that 
the address to replace the destination address is registered 
as the temporary address, the IP address checking module 153 

10 notifies, to the temporary IP address assignment module 14, 
that the relevant address is the temporary address. 

The IP header translation module 13 judges, when it 
is notified from the IP address checking module 153 that the 
address to replace the destination address is the temporary 

15 address, that the host which is given the relevant address 
does not exist in the destination side network and discards 
the received packets. Moreover, a message notifying that 
the packet in which the temporary address becomes the 
destination through the address translation is received is 

20 transmitted to the console unit 11 through the console 
interface 17. 

When it is proved as a result of address checking that 
the address to replace the destination address is registered 
as the native address, the IP address checking module 153 
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judges this condition as the normal condition and transfers 
the relevant address to the IP header translation module 13 . 

The IP header translation module 13 transmits, when 
it receives an address to replace the destination address 

5 from the IP address checking module 153, a query to replace 
the transmission source address of the received packets to 
the IP address translation information manager 15. 

In the IP address translation information manager 15, 
the table searching module 154 searches the IP address 

10 translation table 150 to find out an entry including the 
transmission source address of the received packets. When 
the entry including the transmission source address cannot 
be found as a result of search, it is notified, to the IP 
header translation module 13 that the entry including the 

15 transmission source address does not exist. 

The transmission source address is replaced with a 
temporary address from a native address. Therefore, when 
it is notified that the entry including the transmission 
source address does not exist, the IP header translation 

20 module 13 judges that the temporary address is not yet 
assigned, and requests assignment of the temporary address 
to the IP address assignment module 14. 

Upon reception of the request from the IP header 
translation module 13, the IP address assignment module 14 

25 assigns a new temporary address to the transmission source 
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address of the received packets and then registers this new 
temporary address to the IP address translation table 150, 
In this case, the discriminator of the temporary address is 
also registered to the IP address translation table 150. 
5 On the other hand, when the entry including the 

transmission source address is found as a result of search, 
the table searching module 154 transfers contents of the 
entry to the IP address checking module 153. 

The IP address checking module 153 checks whether the 

10 transmission source address is a native address or a 

temporary address by referring the discriminator of the 
temporary address included in the entry received. When it 
is proved as a result that the transmission source address 
is registered as the temporary address, the IP address 

15 checking module 153 notifies that the relevant address is 
the temporary address to the IP address assignment module 
14. 

When it is notified, from the IP address checking 
module 153, that the transmission source address is the 

20 temporary address, the IP header translation module 13 
judges that the host which is given the relevant address does 
not exist in the transmitting side network and discards the 
received packets. Moreover, this IP header translation 
module 13 transmits a message notifying that the packet 

25 having the temporary address as the transmission source has 
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been received to the console unit 11 through the console 
interface 17. 

When it is proved as a result of address check that 
the transmission source address is registered as the native 
5 address, the IP address checking module 154 judges that it 
is in the normal state and transfers the address to replace 
the transmission source address to the IP header translation 
module 13 . 

Upon reception of the address to replace the 

10 transmission source address from the IP address checking 
module 153, the IP header translation module 13 generates 
a new IP header having the address notified from the address 
checking module 153 as the destination using such address 
as the transmission source, uses the newly generated IP 

15 header in place of the IP header of the received packets, 
and then transmits the new IP packet to the destination side 
network through the IP packet I/O interface 12. 

Operations and transition of internal conditions of 
the IPv4 -IPv6 translator 1 when the practical network has 

20 been applied will be described sequentially. 

Fig. 5 is a schematic diagram of the communication 
network system wherein the IPv4 network 2 and the IPv6 
network 3 are connected through the IPv4 -IPv6 translator 1. 
The IPv4 -IPv6 translator 1 is connected with the console 

25 unit 11 and contents of the table illustrated in Fig. 2 are 
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displayed as required in the display screen of the console 
unit. 

The IPv4 network 2 is connected with an IPv4 DNS server 
21 and an IPv4 host 22. These devices use only the IPv4 as 
5 the communication protocol. Here, it is assumed that the 
IPv4 host 22 is given the IPv4 address 133.144.10.1. 

The IPv6 network 3 is connected with a DNS proxy server 
30, an IPv6 DNS server 31 and an IPv6 host 32. These devices 
use only the IPv6 as the communication protocol. It is also 
10 assumed that the IPv6 host 32 is given the IPv6 address 
2001:1::!. The IPv4 DNS server 21 performs management of 
the domain information of the IPv4 network 2. This domain 
information assures registered correspondence between the 
host names and the IPv4 addresses but does not assure 
15 registered correspondence between the host names and the 
IPv6 addresses. 

The IPv6 DNS server 31 performs management of the 
domain information of the IPv6 network 3. This domain 
information assures registered correspondence between the 
20 host names and the IPv6 addresses but does not assure 

registered correspondence between the host names and the 
IPv6 addresses. 

The DNS proxy server 3 0 is set to transfer a query for 
the domain information of the IPv4 network 2 to the IPv4 DNS 
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server 21 and to transfer a query for the domain information 

of the IPv6 network 3 to the IPv6 DNS server 31. 

The IPv4 -IPv6 translator 1 is here assumed to reserve 

254 IPv4 addresses up to 133.11.98.254 from 133.11.98,1 as 
5 the temporary IPv4 addresses to be assigned to the IPv6 

hosts. Moreover, as a prefix to generate the temporary IPv6 

address assigned to the IPv4 host, 3ffe:l: :/96 is reserved. 
In addition, in the IPv4 -IPv6 translator 1, the 

necessary address translation rule is preset to realize 
10 communication between the IPv4 DNS server 21 and the IPv4 

host 22 or DNS proxy server 30 through the address 

translation. 

First, as an example of reception of the normal 
packets by the IPv4 -IPv6 translator 1, communication 
15 between the IPv4 host 22 and the IPv6 host 32 is considered 
here. 

Fig. 6 is a sequence diagram showing the procedures 
for name resolution of the IPv6 host 32 by the IPv4 host 22. 

The IPv4 host 22 transmits a message inquiring the 
20 IPv4 address corresponding to the name of IPv6 host 

(hereinafter, referred to as the "message A") to the DNS 
proxy server 30. 

The message A is translated, by the IPv4 -IPv6 
translator 1, to the IPv6 packet from the IPv4 packet and 
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address being inquired in the message A received from the 
IPv4 host 22. 

When the message AA is received, the IPv4 -IPv6 
translator 1 searches the IP address translation table 150 
5 to check whether the temporary IPv4 address for the IPv6 
address 2001:1: :1 is already registered or not. However, 
the target address translation information is not yet 
registered, in this timing, to the IP address translation 
table 150. 

10 Therefore, the IPv4-IPv6 translator 1 assigns the 

IPv4 address 133.11.98.1 as a temporary IPv4 address for the 
IPv6 address 2001:1: :1, records 133.11.98.1 to the area 
storing the IPv4 address in the entry 1 of the IP address 
translation table 150 , records 2001 : 1 : : 1 to the area storing 

15 the IPv6 address, and records, to the area storing the 
discriminator of the temporary address, the value 0 
indicating that the IPv4 address is the temporary address 
and the IPv6 address is the native address. 

Moreover, the IPv4 -IPv6 translator 1 returns, to the 

20 DNS proxy server 30, the temporary IPv4 address 133.11.98.1 
as a response to the message AA (hereinafter, referred to 
as the "message BB") . 

The DNS proxy server 30 updates the IPv6 address 
2001:1: :1 described in the message D to the temporary IPv4 

25 address 133.11.98.1 and returns a response message for the 
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destination address after the IP header translation 
process . 

Next, the IPv4 -IPv6 translator 1 searches the IP 
address translation table 150 to find out the IPv6 address 

5 corresponding to the IPv4 address 133.144.10.1. However, 
in this timing, the target address translation information 
is not registered in the IP address translation table 150. 

Therefore, the IPv4 -IPv6 translator 1 adds the prefix 
3ffe:l::/96 to the IPv4 address 133.144.10.1 to newly 

10 generate the temporary IPv6 address 3f f e : 1 : : 8590 : OaOl , 
records 133.144.10.1 to the area for storing the IPv4 
address in the entry 2 of the IP address translation table 
150, and then records 3f f 3 : 1 : : 8590 : OaOl to the area for 
storing the IPv6 address, and records the numeral 1 

15 indicating that the IPv6 address is the temporary address 
and the IPv4 address is the native address to the area for 
storing kinds of the temporary addresses. The IPv6 address 
3ffe:l: :8590:0a01 generated in this timing becomes the 
transmission source address after the IP header translation 

20 process. 

Since the addresses required for translation of 
packet a are all obtained, the IP header translation process 
is performed. Thereby, the packet a is translated to the 
IPv6 packet having the destination address 2001:1: :1 and 
25 transmission source address 3f fe : 1 :: 8590 : OaOl . This IPv6 
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packet is transmitted to the IPv6 network 3 and reaches the 
IPv6 host 32. 

Fig. 8 is a sequence diagram showing the flows until 
the IPv4 host 22 has transmitted an IPv4 packet of the 

5 destination address 133.11.98.1 and transmission source 
address 133.144.10.1 (hereinafter, referred to as the 
"packet b") after transmission of the packet a and this IPv4 
packet reaches the IPv6 host 32. 

According to Fig. 8, the IPv4 -IPv6 translator 1 

10 repeats, upon reception of the packet b, the procedure 
described above until the search of the IPv6 address 
corresponding to the IPv4 address 133.144.10.1 of the 
transmission source. 

As a result of search of the IPv6 address of the 

15 transmission source, it is found this time that the IPv6 
address 3ffe:l: :8590:0a01 corresponding to the IPv4 address 
133 . 144 .10.1 is stored in the entry 2 registered previously 
of the address translation table 150. 

Next, as a result of reference to the discriminator 

20 of the temporary address of entry 2, it is proved, because 
the value 1 is recorded, that the IPv6 address is a temporary 
address and the IPv4 address is a native address. Namely, 
the transmission source address before address translation 
is the native address under the normal condition. 

25 Therefore, the IPv6 address 3f f e : 1 : : 9590 : OaOa recorded to 
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the entry 2 becomes the transmission source address after 
the IP header translation process. 

Since the addresses required for translation of the 
packet b are all obtained as described above, the IP header 
5 translation process is performed and the packet b is 

translated to the IPv6 packet of the destination address 
2001:1: :1 and transmission source address of 
3ffe:l: :8590:0a01 and this IPv6 packet is transmitted to the 
IPv6 network 3 and then reaches the IPv6 host 32. 

10 Fig. 9 is a sequence diagram showing the flows until 

the IPv6 host 32 transmits a packet of the destination 
address of 3f f e: 1 : : 8590 : OaOl and transmission source 
address of 2001:1: :1 (hereinafter, referred to as the 
"packet c") and this packet c reaches the IPv4 host 22. 

15 The IPv4 -IPv6 translator 1 searches, upon reception 

of the packet c, the IP address translation table 150 to find 
out the IPv4 address corresponding to the destination 
address 3f f e: 1 : : 8590 : OaOl . As a result, it is found that 
the IPv4 address 133.144.10.1 corresponding to the IPv6 

20 address 3f fe : 1 :: 8590 : OaOl is stored in the entry 2 
registered previously. 

Next, as a result of reference to the discriminator 
of the temporary address of entry 2, it is proved, because 
the value 1 is recorded, that the IPv6 address is a temporary 

25 address and the IPv4 address is a native address. Namely, 
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the address to replace the destination address is the native 
address under the normal condition. Therefore, the IPv4 
address 133.144.10.1 recorded in the entry 2 is used as the 
destination address after the IP header translation 
5 process. 

Moreover, the IPv4 -IPv6 translator 1 searches the IP 
address translation table 150 to find out the IPv4 address 
corresponding to the IPv6 address 2001:1: :1 of the 
transmission source. As a result, it can be found that the 

10 IPv4 address 133.11.98.1 corresponding to the IPv6 address 
2001:1: :1 is stored in the entry 1 registered previously. 

Next, as a result of reference to the discriminator 
of the temporary address of the entry 1, it is proved, 
because the value 0 is recorded, that the IPv4 address is 

15 a temporary address and the IPv6 address is an native 
address. Namely, the transmission destination address 
before address translation is the native address in the 
normal condition. Therefore, the IPv4 address 133.11.98.1 
recorded to the entry 1 becomes the destination address 

20 after the IP header translation process. 

Since the addresses required for translation of 
packet c are all obtained as described above, the IP header 
translation process is performed. Thereby, the packet c is 
translated to the IPv4 packet of the destination address 

25 133.144.10.1 and the transmission source address 
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"message G") to the DNS proxy server 30. The message G is 
translated to the IPv6 packet from the IPv4 packet in the 
IPv4 -IPv6 translator 1 and is then transferred to the DNS 
proxy server 30. 

5 The DNS proxy server 30 duplicates the message F, 

because the IPv6 address corresponding to the name of IPv4 
host 23 cannot be obtained as a result of reception of the 
message G and thereafter generates a message inquiring the 
IPv4 address corresponding to the name of the IPv4 host 23 

10 (hereinafter, referred to as the "message H") and transfers 
this message H to the IPv4 DNS server 21. The message H is 
translated, in the course of transfer, to the IPv4 packet 
from the IPv6 packet in the IPv-IPv6 translator 1 and is then 
transferred to the IPv4 DNS server 21. 

15 Upon reception of the message H, the IPv4 DNS server 

21 searches the IPv4 address for the name of the IPv4 host 
and returns the IPv4 address 133.11.98.1 registered to the 
DNS proxy server 30 as a response message for the message 
H (hereinafter, referred to as the "message I") . The message 

20 I is translated, in the course of transfer, to the IPv6 
packet from the IPv4 packet in the IPv4 -IPv6 translator 1 
and is then transferred to the DNS proxy server 30. 

When the message I is received, the DNS proxy server 
30 transmits, because the IPv4 address 133.11.98.1 is 

25 described in the message I and this address is not the IPv6 



-37- 



address which is inquired with the message F received from 
the IPv6 host 32, a message requesting the temporary IPv6 
address corresponding to the address 133.11.98.1 to the 
IPv4-IPv6 translator 1 (hereinafter, referred to as the 

5 "message AAA" ) . 

Upon reception of the message AAA, the IPv4 -IPv6 
translator 1 searches the IP address translation table 150 
to find out the IPv6 address corresponding to the IPv4 
address 133.11.98.1. Here, the IPv6 address 2001:1: :1 

10 corresponding to the IPv4 address is found to be stored in 
the entry 1 registered previously. 

Next, as a result of reference to the discriminator 
of the temporary address of entry 1, it is proved, since the 
value 0 is registered, that the IPv4 address is a temporary 

15 address and the IPv6 address is a native address. Namely, 
the original IPv4 address is registered as the temporary 
address. Therefore, the IPv4 -IPv6 translator 1 returns a 
message suggesting that assignment of the IPv6 address has 
failed to the DNS proxy server 30 as the response for the 

20 message AAA (hereinafter, referred to as the "message BBB") . 

Moreover, the IPv4 -IPv6 translator 1 transmits, to 
the console unit 11, a message suggesting that assignment 
of the temporary IPv6 address has been requested for the 
temporary IPv4 address. 
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address. Therefore, the IPv4-IPv6 translator 1 discards the 
packet d. 

Moreover, the IPv4 -IPv6 translator 1 transmits, to 
the console unit 11, a message suggesting that the packet 
5 having the temporary IPv4 address as the transmission source 
address has been received. 

Hereinafter, if the IPv4 host 24 tries to make 
communication with a host of the IPv6 network 3 using a false 
transmission source address 133.11.98.1, the communication 
10 with a host of the IPv6 network 3 cannot be realized because 
the packet is discarded in the IPv4 -IPv6 translator 1 as 
described above. 
Embodiment 2 

The embodiment described above relates to the mutual 
15 translation between the IPv4 address and IPv6 address but 
the present invention does not depend on either kinds or 
numbers of addresses. Therefore, the present invention can 
also be adapted to the translator for translating an IPv4 
address to another IPv4 address, translator for translating 
20 addresses other than the IP address and translator for 
mutual translation among three or more kinds of addresses. 

In the case of Fig. 5, the DNS proxy server 30 is 
allocated in the IPv6 network, but it may also be allocated 
in any type of network when communication is possible for 
25 all networks connected to the address translator. Moreover, 
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it is also possible to realize co-location of the DNS proxy 
server and the address translator. 

In order to discriminate a temporary address and a 
native address among a plurality of addresses described in 

5 the individual address translation rule, a value indicating 
the kinds of temporary addresses (IPv6 address or IPv4 
address) is stored for each entry, but it is also possible, 
in place of this method, that the attribute of address 
(native address or temporary address) is stored for each 

10 address. 

The console unit 11 is independent of the IP network 
in Fig. 1 but it is sometimes connected to an address 
translator via the IPv4 network or IPv6 network. In this 
case, the message to the console unit when a fault occurs 

15 is transmitted through an IP packet I/O interface in place 
of an independent console interface. 

As a means to notify occurrence of a fault to an 
administrator, a display or an alarm lamp or an alarm sound 
generator may be provided to the address translator body as 

20 a subsidiary or substitute of the console unit 11. 

On the occasion of the address translation process, 
any one of the searches of the destination address 
translation rule and transmission source address 
translation rule may be started earlier. Moreover, it may 

25 be selected freely that upon completion of the search of 
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translation rule and the address check of any one of 

destination address and transmission source address, the 

search of translation rule and address check of the other 

address are performed or check of both addresses is 
5 performed after the search of translation rule of both 

addresses is completed. 

As the profile of the second embodiment of the present 

invention, an IPv4 -IPv4 translator lb will be described. 
Fig. 12 is a schematic diagram of the communication 
10 network system in which the IPv4 network 2 and an IPv4 

network 4 are connected through the IPv4 -IPv4 translator lb. 

In the IPv4-IPv4 translator lb, the console unit 11 and the 

DNS proxy server 3 0 are connected. 

In the IPv4 network 2, the IPv4 DNS server 21 and the 
15 IPv4 host 22 are connected. It is assumed here that the IPv4 

host 22 is given the exclusive IPv4 address 133.144.10.1 of 

the IPv4 network 2 . 

In the IPv4 network 4, an IPv4 DNS server 41 and an 

IPV4 host 42 are connected. It is assumed also that the IPv4 
20 host 42 is given the exclusive IPv4 address 192.168.1.1 of 

the IPv4 network 4 . 

The IPv4 DNS server 21 performs management of the 

domain information of the IPv4 network 2. In this domain 

information, correspondence between the name of host and the 
25 exclusive IPv4 address of the IPv4 network 2 is registered. 
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Meanwhile, the IPv4 DNS server 41 performs management 
of the domain information of the IPv4 network 4. In this 
domain information, correspondence between the name of host 
and the exclusive IPv4 address of the IPv4 network 4 is 
5 registered. 

The DNS proxy server 30 is set to transfer an inquiry 
for the domain information of the IPv4 network 2 to the IPv4 
DNS server 21 and to transfer an inquiry for the domain 
information of the IPv4 network 4 to the IPv4 DNS server 41. 

10 Moreover, the DNS proxy server 30 makes communication with 
the IPv4 -IPv4 translator lb with the IPv6 packet. 

Here, it is assumed that 254 IPv4 addresses up to 
133.11.98.254 from 133.11.98.1 are reserved for the 
IPv4 -IPv4 translator lb as the exclusive temporary IPv4 

15 addresses of the IPv4 network 2 for assignment to the hosts 
connected to the IPv4 network 4. Moreover, it is also 
assumed that 254 IPv4 addresses up to 192.168.100.254 from 
192.168.100.1 are also reserved as the exclusive temporary 
IPv4 addresses of the IPv4 network for assignment to the 

20 hosts connected to the IPv4 network 2. 

It is further assumed that the necessary address 
translation rule is preset to the IPv4 -IPv4 translator lb 
to realize communication between the IPv4 DNS server 21, 
IPv4 host 22, IPv4 DNS server 41 and the DNS proxy server 

25 30 through the address translation. 
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Fig. 13 is a structural diagram of an IP address 
translation table 150b. One entry of this table includes 
an area 153 for storing the exclusive IPv4 address of the 
IPv4 network 2, an area 154 for storing attribute 

5 information of the IPv4 address, an area 155 for storing the 
exclusive IPv4 address of the IPv4 network, an area 156 for 
storing attribute of the IPv4 address, an area 157 for 
storing the temporary IPv6 address for intermediation 
between the exclusive IPv4 address of the IPv4 network 2 and 

10 the exclusive IPv4 address of the IPv4 network 4, and an area 
158 for storing attribute of the IPv6 address. When the 
addresses described in the areas 153, 155, and 157 are native 
addresses, the numeral 1 is recorded to the areas 154, 156, 
and 158, while the numeral 0 is recorded when these addresses 

15 are temporary addresses. 

The IPv4 -IPv4 translator lb generates the temporary 
IPv6 address having added the prefix 3ffe:l::/96 for the 
exclusive IPv4 address of the IPv4 network 2, while the 
temporary IPv6 address having added the prefix 2001:1: :/96 

20 for the exclusive IPv4 address of the IPv4 network 4. 

Accordingly, even if the IPv4 address overlapping in both 
IPv4 network 2 and IPv4 network 4 exists, these addresses 
can be discriminated. 
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Operations and transition of internal condition of 
the IPv4-IPv4 translator lb when it has been applied to the 
practical networks will be described sequentially. 

Communication to the IPv4 host 42 from the IPv4 host 
5 22 will be considered first as an example of normal reception 
of the packets by the IPv4 -IPv4 translator lb. 

Fig. 14 is a sequence diagram showing the procedures 
for name resolution of the IPv4 host 42 by the IPv4 host 22. 

The IPv4 host 22 transmits, to the DNS proxy server 
10 30, a message inquiring the IPv4 address corresponding to 
the name of IPv4 host 42 (hereinafter, referred to as the 
"message A") . The DNS proxy server 3 0 transfers the message 
A to the IPv4 DNS server 41. 

The IPv4 DNS server 41 returns, to the DNS proxy server 
15 30, the IPv4 address 192.168.1.1 corresponding to the name 
of IPv4 host 42 as a response message for the message A 
(hereinafter, referred to as the "message D") 

When the message D is received, the DNS proxy server 
30 judges that the IPv4 address 192.168.1.1 in the message 
20 D is the exclusive address of the IPv4 network and therefore 
it cannot be received by the IPv4 network 2 and transmits 
first a message requesting the temporary IPv6 address to the 
address 192.168.1.1 (hereinafter, referred to as the 
message "AA") to the IPv4 -IPv4 translator lb. 
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The IPv4 -IPv4 translator lb searches, upon reception 
of the message AA, the IP address translation table 150b. 
Accordingly, it is proved that the temporary IPv4 address 
for the exclusive IPv4 address 192.168.1.1 of the IPv4 

5 network is not yet assigned. 

Therefore, the IPv4 -IPv4 translator lb assigns the 
IPv6 address 2001 : 1 :: c0a8 : 0101 as the temporary IPv6 
address to the IPv4 address 192:168:1.1, records the address 
192.168.1.1 to the area for storing the exclusive IPv4 

10 address of the IPv4 network 4 in the entry 1 of the IP address 
translation table 150b, records the value 1 suggesting that 
the relevant address is the native address to the area for 
storing attribute of the IPv4 address, records the address 
2001:1: :c0a8:0101 to the area for storing the IPv6 address, 

15 and records the value 0 suggesting that the relevant address 
is the temporary address to the area for storing attribute 
of the IPv6 address. 

Moreover, the IPv4 -IPv4 translator lb returns the 
temporary IPv6 address 2001 : 1 :: c0a8 : 0101 to the DNS proxy 

20 server 3 0 as a response to the message AA (hereinafter, 
referred to as the "message BB") . 

Upon reception of the message BB, the DNS proxy server 
30 transmits a message requesting the exclusive temporary 
IPv4 address of the IPv4 network 2 for the IPv6 address 
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and transmission source address 192.168.100.1, transmitted 
to the IPv4 network 4 and reaches the IPv4 host 42. 

Next, as a first example where the IPv4 -IPv4 
translator lb receives a defective packet, there is 

5 considered here that communication is extended to the IPv4 
host 23 from the IPv4 network 4 under the condition that 
communication is extended to the IPv4 host 42 from the IPv4 
host 22 and moreover the IPv4 host 23 which is given the IPv4 
address 133.11.98.1 is connected to the IPv4 network 2. 

10 Fig. 16 is a sequence diagram showing the procedures 

for making communication to the IPv4 host 23 from the IPv4 
host 42, 

The IPv4 host 42 transmits a message inquiring the 
IPv4 address corresponding to the name of IPv4 host 23 
15 (hereinafter, referred to as the "message F") to the DNS 
proxy server 30. This DNS proxy server 30 transfers the 
message F to the IPv4 DNS server 21. 

The IPv4 DNS server 21 returns the IPv4 address 
133.11.98.1 for the name of IPv4 host 23 to the DNS proxy 
20 server 30 as a response message for the message F 
(hereinafter, referred to as the "message G") . 

The DNS proxy server 30 judges, upon reception of the 
message G, that the IPv4 address 133.11.98.1 in the relevant 
message is the exclusive address of the IPv4 network 2 and 
25 therefore cannot be used in the IPv4 network 4 . Accordingly, 
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the DNS proxy server 30 transmits a message, to the IPv4 -IPv4 
translator lb, requesting the temporary IPv6 address for the 
address 133.11.98.1 {hereinafter, referred to as the 
"message AAA") . 
5 When the message AAA is received, the IPv4 -IPv4 

translator lb searches the IP address translation table 150b 
and obtains, from the entry 1, the exclusive IPv4 address 
192.168.1.1 of the IPv4 network 2 corresponding to the 
exclusive IPv4 address 133.11.98.1 of the IPv4 network 4. 

10 Next, as a result of reference to the attribute 

information of the exclusive IPv4 address of the IPv4 
network 2 of the entry 1, it is proved that the value 0 
suggesting the temporary address is recorded, opposing to 
the condition that the destination address after the IP 

15 header translation process has to be the native address. 
Therefore, the IPv4-IPv4 translator lb returns, to the DNS 
proxy server 30, a response to the message AAA suggesting 
that assignment of the temporary IPv6 address has failed 
(hereinafter, referred to as the "message BBB") . 

20 Moreover, the IPv4 -IPv4 translator lb transmits, to 

the console unit 11, a message requesting assignment of the 
temporary IPv6 address for the temporary IPv4 address. The 
DNS proxy server 30 transmits, as a result of reception of 
the message BBB, an error response to the message F 
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2 of the destination and transmits a false IPv4 packet of 
the destination address 133 .11.98.2 and transmission source 
address 133.11.98.1 (hereinafter, referred to as the 
"packet d") to the IPv4 - IPv4 translator lb. 
5 Upon reception of the packet d, the IPv4 -IPv4 

translator lb searches the IP address translation table 150b 
and obtains, from the entry 3, the exclusive IPv4 address 
of the IPv4 network 4 corresponding to the exclusive IPv4 
address 133.11.98.2 of the IPv4 network 2. 

10 Moreover, as a result of reference to the attribute 

information, it is proved that the value 1 suggesting the 
native address is recorded under the normal condition. 

Next, the IPv4 -IPv4 translator lb searches the IP 
address translation table 150b and obtains the exclusive 

15 IPv4 address 192 .168.1.1 of the IPv4 network 4 corresponding 
to the exclusive IPv4 address 133.11.98.1 of the IPv4 
network 2. 

Moreover, as a result of reference to the attribute 
information of the exclusive Ipv4 address of the IPv4 
20 network 2 of the entry 1, it is proved that the value 0 
suggesting the temporary address is recorded, opposing to 
the condition that the transmission source of the receiving 
packet has to be the native address. Here, the IPv4 -IPv4 
translator lb discards the packet d. 
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In addition, the IPv4-IPv4 translator lb also 
transmits, to the console unit 11, a message suggesting that 
the packet having the temporary IPv4 address as the 
transmission source address has been received. 

5 Thereafter, if the IPv4 host 24 tries the 

communication with hosts of the IPv4 network 4 using the 
false transmission source address 133.11.98.1, the packets 
are discarded by the IPv4 -IPv4 translator lb as described 
above. Accordingly, communication with hosts of the IPv4 

10 network 4 using a false address cannot be realized. 

The address translator of the present invention is 
provided with a function to check the translation source 
address before translation and the destination address 
after translation at the time of address translation 

15 process. Therefore, this address translator can prevent 
transmission of packets having no destination and 
transmission source addresses and thereby can also prevent 
giving adverse effect to the networks. 

Moreover, since reception of the relevant packets is 

20 notified to an administrator, the administrator can 

recognize erroneous setting of temporary address used for 
address translation and address spoofing of hosts having a 
false address through malicious use of temporary address and 
can also quickly take the appropriate measures. 



